Fig Group’s IASME licences, independently verifiable.
Fig Compliance Ltd is an IASME-licensed certification body. We publish four scheme-specific registry IDs, the contracting entity, the scope, and the official IASME directory link - all verifiable without contacting Fig.
Cyber Essentials licence ID
325cdf33-3812-4082-bf8d-7dce7ac02977Contracting entity
Fig Compliance Ltd
Companies House 16857592
Licence scope
CE · CE Plus · DCC L0+L1
What this means
How IASME licensing works
An IASME licence is the credential that allows a UK body to issue Cyber Essentials certificates. Three things every buyer should know about how the system is structured.
01 · The licence
IASME licenses every UK CE body
Cyber Essentials is delivered by IASME on behalf of the NCSC. Every UK body that issues Cyber Essentials certificates must hold an active IASME licence. Without a licence, a body cannot legally issue scheme-recognised certificates.
02 · The directory
Public directory of all licensed bodies
IASME publishes certification-body directories. Cross-check the relevant scheme listing and registry record independently of provider marketing; contact IASME if status or scope is unclear.
03 · The scope
Four separate scheme licences
Fig Compliance Ltd holds separate scheme-specific licences for Cyber Essentials, Cyber Essentials Plus, DCC Level 0 and DCC Level 1. Each has its own corresponding Blockmark registry ID and linked record below.
How to verify
Verify each Fig Group licence in three steps
The verification path takes under two minutes and uses only IASME's own directory - no Fig-controlled pages required.
- 01
Step 1
Open the IASME certificate registry
Open Fig’s certificate record on the IASME-operated Blockmark Tech registry - the canonical, tamper-evident record of the licence. The IASME directory at iasme.co.uk is an alternative source of truth.
- 02
Step 2
Confirm the licensed entity
The record shows Fig Compliance Ltd as the operating entity (the licensed body that issues the certificates). The IASME directory carries the same entity name if you are cross-checking there.
- 03
Step 3
Cross-check each scheme record and validity
The registry record carries the same licence ID we publish on this page: 325cdf33-3812-4082-bf8d-7dce7ac02977. An ID match identifies the record; it does not prove current validity. Check the issuer, Fig Compliance Ltd entity, scheme scope, current status and validity dates in each corresponding record.
Key facts
The scheme licences at a glance
- Cyber Essentials licence ID
- 325cdf33-3812-4082-bf8d-7dce7ac02977
- Issued by
- IASME (delivering Cyber Essentials on behalf of NCSC)
- Contracting entity
- Fig Compliance Ltd (Companies House 16857592, VAT 527713680)
- Group parent
- The Fig Group Limited (Companies House 16845978)
- Scope
- Four separate licences: Cyber Essentials · Cyber Essentials Plus · DCC Level 0 · DCC Level 1
- Verification source
- IASME-operated Blockmark Tech registry + IASME directory (links below)
Registry-linked badges
Each licence is verifiable on Blockmark.
Each approved licence mark links to the corresponding IASME-operated Blockmark Tech registry record, where its current status can be verified independently.
Why this matters
What licensed actually buys you
Beyond the legal requirement, IASME licensing is the verifiable layer that buyers, insurers, and procurement teams actually rely on.
Procurement evidence
Use the relevant scheme registry record and IASME directory to verify the certification body. Check the evidence requirements set by your buyer or insurer.
Contract defensibility
PPN 014 applies to certain public contracts and recognises Cyber Essentials or Cyber Essentials Plus certification, or evidence of equivalent controls. Check the tender and applicable guidance; ask IASME about any change in a certification body’s licence status rather than assuming a certificate is void.
Entity-level scrutiny
The licence sits with the legal entity, not the brand. Fig Compliance Ltd (the operating entity) is the licensed body - check the Companies House record matches the trading name on your invoice.
Verification sources
Independent sources, no Fig pages required
Every claim on this page is verifiable via these external authorities. Fig has no control over their content.
External authorities
IASME licence registry record
Fig's certificate on the IASME-operated Blockmark Tech registry
IASME certification body directory
Search for "Fig Compliance Ltd" or the licence ID
NCSC Cyber Essentials overview
Government scheme owner
Companies House - Fig Compliance Ltd
Verify the licensed entity (16857592)
Companies House - The Fig Group Limited
Verify the parent group entity (16845978)
Fig Group sources
FAQ
Licensing questions answered
How do I verify Fig Group's IASME licence?
The fastest verification starts with each scheme-specific record linked below; the Cyber Essentials record is on the IASME-operated Blockmark Tech registry at https://registry.blockmarktech.com/certificates/325cdf33-3812-4082-bf8d-7dce7ac02977/. Its registry ID is 325cdf33-3812-4082-bf8d-7dce7ac02977. Check each record’s issuer, legal entity, scheme scope, status and validity; matching an ID alone does not establish a current licence. The IASME directory at https://iasme.co.uk/cyber-essentials/find-a-certification-body/ is an alternative source of truth - both are independent of Fig and authoritative.
Can a body issue Cyber Essentials without an IASME licence?
No. Cyber Essentials is run by IASME on behalf of the NCSC, and only IASME-licensed bodies can issue scheme-recognised certificates. Any "Cyber Essentials" certificate issued by a non-licensed body would not be recognised by buyers, insurers, or regulators.
Does the licence cover Cyber Essentials Plus too?
Fig Compliance Ltd holds separate Cyber Essentials and Cyber Essentials Plus licences. Verify each corresponding scheme record below; the same licensed legal entity delivers both routes.
Does the licence cover Defence Cyber Certification?
Yes. Fig is IASME-licensed for DCC Level 0 and Level 1. For DCC Level 2 and Level 3 we refer suppliers to IASME-licensed certification bodies licensed for those tiers (verifiable on the IASME directory at iasme.co.uk) - we do not subcontract those tiers.
Why is Fig Compliance Ltd listed instead of "Fig Group"?
Fig Compliance Ltd is the legal entity that holds the four scheme-specific IASME licences and issues the certificates. The Fig Group Limited is the parent company / website operator. The certificate appears on the IASME register under the licensed entity name - Fig Compliance Ltd - not the brand name.
How often is the IASME directory updated?
Check the relevant IASME directory and scheme registry record for the status and validity shown when you verify. No directory update interval is promised here. If information is missing or inconsistent, obtain confirmation from IASME.
Where does the £25k cyber liability insurance come from?
IASME separately arranges a cyber-liability benefit through its insurance partner for eligible Cyber Essentials certificate holders, regardless of which licensed body issues the certificate. Eligibility criteria and policy terms apply. Fig does not provide or arrange it.
Verify the licence, then certify with confidence.
Once you’ve cross-checked the IASME registry record, you can buy Cyber Essentials direct, schedule a Cyber Essentials Plus engagement, or talk to an assessor about Defence Cyber Certification - all under the same licensed entity.